In the Claims 



Please add the following Claims in the present application to the above-referenced 
application. 

1. (Original): A method of building a resource access table in a system for controlling access 
to resources comprising the steps of: 

identifying a resource call in a process; 
identifying a resource accessed by the resource call; 
analyzing the resource call by an intrusion detection module; 
assigning permission to the resource; 

writing a resource access table entry in a resource access table including data 
identifying the process, the resource and the permission; 

such that when the process is executed and the process makes a resource call to the 
resource, access to the resource may be controlled by the permission data entry in the resource 
access table entry of the resource access table. 

2. (Original): The method of building a resource access table of claim 1 , wherein the step of 
identifying a resource call in a process is automated. 

3. (Original): The method of building a resource access table of claim 1 , wherein the step of 
identifying a resource accessed by the resource call is performed by a computer. 

4. (Original): The method of building a resource access table of claim 1, wherein the step of 
assigning permission data to the resource is performed by software. 

5. (Original): The method of building a resource access table of claim 1 , further including the 
step of writing a resource access table entry to a process resource access table. 

6. (Original): The method of building a resource access table of claim 5, wherein said process 
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resource access table is compiled to generate a resource access table. 

7. (Original): A method of building a resource access table in a system for controlling access 
to resources comprising the steps of: 

identifying a resource call in a process; 
identifying a resource accessed by the resource call; 
5 analyzing the resource call by an intrusion detection module, 

assigning permission to the resource call; 

writing a resource access table entry in a resource access table including data 
identifying the process, the resource call, the resource and the permission; 

such that when the process is executed and the process makes a resource call to the 
10 resource, access to the resource may be controlled by the permission data in the resource access 
table entry of the resource access table. 

8. (Original): The method of building a resource access table of claim 7, wherein the step of 
identifying a resource call in a process is automated. 

9. (Original): The method of building a resource access table of claim 7, wherein the step of 
identifying a resource accessed by the resource call is performed by a computer. 

10. (Original): The method of building a resource access table of claim 7, wherein the step of 
assigning permission data to the resource is performed by software. 

1 1 . (Original): The method of building a resource access table of claim 7, further including the 
step of writing a resource access table entry to a process resource access table. 

1 2. (Original): The method of building a resource access table of claim 1 1 , wherein said process 
resource access table is compiled to generate a resource access table. 
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13. (New): A method of controlling access to resources comprising the steps of: 

identifying a resource call from a process; 
identifying a resource accessed by the resource call; 
determining if the process is associated with a resource access table; 
checking process permissions and granting access to the resource in accordance with 
5 said process permissions when the process is associated with a resource access table; and 

checking user permissions and granting access to the resource in accordance with said 
user permissions when the process is not associated with a resource access table. 

14. (New): The method of controlling access of claim 13, wherein said user permissions are 
UNIX permissions. 

15. (New): The method of controlling access of claim 13, wherein said step of identifying a 
resource call is performed by an operating system. 

16. (New): The method' of controlling access of claim 13, further comprising the step of 
analyzing the resource call to generate a resource access table. 

17. (New): The method of controlling access of claim 16, wherein said analyzing the resource 
call is performed by intrusion detection methods. 

18. (New): The method of controlling access of claim 13, wherein said resource is a process. 

19. (New): The method of controlling access of claim 13, wherein said process permissions 
define resources that can be accessed by the process. 

20. (New): The method of controlling access of claim 13, wherein said process permissions 
define resources that can be accessed by a process resource call. 
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